You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@struts.apache.org by Yo...@lifeisgreat.com.sg on 2003/04/22 09:21:21 UTC
Password Encryption
Thanks to all for your response.
However there seems to be a problem which I am facing and which basically
reflects what Voytek has written in the mail below.
- - Not to refer to MD5 as encryption.
The issue is that I do not have any option of converting the hashed MD5
password back to its original form. Therefore it seems that I cannot just
only use MD5 for hashing the password and storing in the database since I
require the original password in certain cases.
I would like to know what is the best option for the functionality of both
encrypting and decrypting the password.
Any small sample program or link would also be a great help.
Really would appreciate your responses asap.
Regards,
Yogesh
Jarnot Voytek Contr
AU HQ/SC To: "'Struts Users Mailing List'" <st...@jakarta.apache.org>
<Voytek.Jarnot@MAXWE cc:
LL.AF.MIL> Subject: RE: Password Encryption using MD5
17/04/2003 08:56 PM
Please respond to
"Struts Users
Mailing List"
We convert the result of the hash into a string of hex, so we can store it
in a varchar2 field... otherwise the weird chars seemed to confuse oracle.
It's also a really good idea to not refer to MD5 as 'encryption', your
passwords are not encrypted - they are hashed...
--
Voytek Jarnot
Quidquid latine dictum sit, altum viditur.
> -----Original Message-----
> From: YogeshChawla@lifeisgreat.com.sg
> [mailto:YogeshChawla@lifeisgreat.com.sg]
> Sent: Thursday, April 17, 2003 2:50 AM
> To: Struts Users Mailing List
> Subject: Password Encryption using MD5
>
>
> Hello,
>
> Need one important info. Really would appreciate your help on
> this one.
>
> If I need to store Message Digest encrypted passwords in a
> database, what
> database datatypes can be used and what should be the size of
> the column
> for storage.
> What is the possible Maximum length of the generated digest ?
>
> Can anybody reply on this asap.
>
> Thanks,
>
> Yogesh
>
>
>
> --------------------------------------------------------------
> --------------
> -----
>
> CONFIDENTIALITY CAUTION :
> The email is only for the use of the person or entity to whom it is
> addressed and contains information that is privileged and
> confidential. If
> you, the reader of this email are not the intended recipient, any
> distribution, copying or dissemination of this email is strictly
> prohibited. If you have received this email in error, please
> contact the
> sender immediately by return email and delete this email.
> Thank you. Please
> visit our website at http://www.lifeisgreat.com.sg.
>
> --------------------------------------------------------------
> --------------
> -----
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: struts-user-help@jakarta.apache.org
>
>
> This transmission (and any information attached to it) may be
> confidential and is intended solely for the use of the
> individual or entity to which it is addressed. If you are not
> the intended recipient or the person responsible for
> delivering the transmission to the intended recipient, be
> advised that you have received this transmission in error and
> that any use, dissemination, forwarding, printing, or copying
> of this information is strictly prohibited. If you have
> received this transmission in error, please immediately
> notify LabOne at the following email address:
> securityincidentreporting@labone.com
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: struts-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org